Does having three qualified API suppliers protect a drug from shortage? Not necessarily. Pharma supply chain risk increasingly lives one tier below the API, at the key starting material (KSM) level, and the U.S. Pharmacopeia’s 2026 Vulnerable Medicine List shows why that gap is dangerous. Forty-eight of the 100 drugs on the list depend on a KSM sourced from a single country, meaning the redundancy procurement teams count on at the finished-dose or API tier can be an illusion.
That is the core finding worth sitting with. A drug can have three API manufacturers spread across three countries and still fail the same week, because all three buy the same upstream chemical building block from the same overseas plant.
Redundant API Suppliers Can Still Share One Point of Failure
Procurement teams qualify multiple API manufacturers as a hedge against disruption. It is standard practice, and on paper it looks like resilience. The problem is that most qualification processes stop at the API tier. They rarely ask where each of those API makers sources its own key starting material.
USP’s analysis found that geographic concentration at the KSM level “can create systemic risk that is invisible when analysis stops at the finished-dosage tier.” That is the sentence procurement and quality leaders in pharma should keep on a sticky note. Multi-sourcing at tier 1 does nothing if every tier-1 supplier is drawing from the same tier-2 or tier-3 chokepoint.
The scale of the exposure is not small. USP’s broader supply chain research found that 41% of KSMs used to make U.S. medicines are sourced exclusively from China, and roughly 35% of U.S. medicines depend on KSMs that are only produced there. Three high-volume drugs newly added to the 2026 list, oseltamivir capsules, famotidine injection, and metoprolol tartrate injection, were flagged specifically for this kind of hidden geographic concentration.
What the 2026 Vulnerable Medicines List Reveals
The list is designed to be forward-looking rather than reactive, and the data backs that up. As of February 2026, only 30 of the 100 listed drugs were in active shortage according to the FDA. The other 70% made the list not because they are currently short, but because their upstream supply chains lack the resilience to absorb a disruption without becoming a shortage.
Injectables account for 63% of the flagged drugs, driven by sterile manufacturing complexity and production capacity that cannot scale quickly when demand spikes. Oral solids are the second-largest group at 22%. No single therapeutic class dominates the list, which tells procurement and quality leaders that KSM concentration risk is not confined to a handful of niche products. It runs across the portfolio.
This is precisely the blind spot Chain Verity was built to close. Chain Verity gives procurement and quality teams visibility into tier 2 and tier 3 supplier financial and operational risk, not just the tier-1 relationships that show up in the ERP.
Tier 2/3 Visibility, Not Just Tier 1 Diversification
Fixing this does not mean abandoning multi-sourcing. It means extending the same diligence procurement already applies at tier 1 down to the KSM and raw material tier, and doing it continuously rather than as a one-time qualification exercise.
That requires three things most legacy tools do not provide: mapping which upstream facility actually produces the KSM behind each API supplier, monitoring the financial and operational health of that facility on an ongoing basis rather than a quarterly snapshot, and quantifying exposure in dollars, not a red-yellow-green score, so a CFO and a CPO can agree on what is actually at risk. Real-time monitoring that reaches past tier 1 turns a static qualification file into a live signal.
Procurement teams that want to see how this kind of tier 2/3 visibility works before it becomes a regulatory or shortage problem can join Chain Verity’s design partner program.
Frequently Asked Questions
Does having multiple API suppliers protect a drug from shortage risk?
Not on its own. If those API suppliers all source the same key starting material from a single upstream facility or country, a disruption at that one source can affect every supplier simultaneously. USP’s 2026 data shows this pattern behind nearly half of the drugs on its Vulnerable Medicine List.
What is a key starting material (KSM) in pharmaceutical manufacturing?
A KSM is an early-stage chemical building block used to manufacture an active pharmaceutical ingredient (API). It sits upstream of the API tier, and its sourcing is often more geographically concentrated than the API tier itself.
Why are so many vulnerable drugs not currently in shortage?
USP’s Vulnerable Medicine List is deliberately forward-looking. Only 30% of listed drugs were in active shortage as of February 2026. The rest are included because their upstream supply chains lack the resilience to absorb a disruption, not because a shortage has already happened.
How can procurement teams get visibility into tier 2 and tier 3 supplier risk?
It requires mapping which facilities actually supply raw materials and KSMs behind each direct supplier, then monitoring those facilities continuously rather than relying on periodic audits. Platforms built for multi-tier, real-time risk monitoring, like Chain Verity, are designed specifically for this gap.
